Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: Yx2ka7Au2+D795/H/oeC36QB+CgWgJMZwUwyGeyHmO4=
Subject key identifier: 5D:10:F1:88:9C:C2:15:42:3C:EF:54:C3:F9:71:1E:7C:BB:61:D2:74
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 0194BBCDB787807FA41E6044D8A8352C4B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 07F9
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: UC8EZMA0cPHM8E+e3mZR59N959H3e2P0MlGIAFo3fcM=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b7:87:80:7f:a4:1e:60:44:d8:a8:35:2c:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=5d10f1889cc215423cef54c3f9711e7cbb61d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:03:58:ba:84:ca:d8:d7:61:42:06:21:4d:75:
e5:10:38:f8:d6:65:ee:12:46:86:a5:e7:8a:d2:c5:
03:ef:97:3f:a1:fd:cd:3f:37:81:08:1c:3a:fd:7c:
67:3b:df:a7:58:5e:7a:b0:1d:87:4f:ca:01:a6:44:
d2:56:24:50:9b:13:d9:3d:0a:da:e7:54:35:c9:20:
05:ea:95:a1:4d:61:cf:66:22:9c:2b:d8:6a:54:27:
f4:d6:47:3e:10:34:a1:64:4f:f3:3e:61:10:e7:e0:
45:a0:43:e7:1a:e3:05:3f:5a:ea:c5:40:56:98:46:
d1:b5:48:57:2e:74:21:bf:c3:a6:d1:a1:44:94:ca:
0b:5e:6b:29:0a:5c:4f:55:2f:25:1d:36:7c:77:fd:
54:6d:e6:ad:ff:3a:8e:31:d0:f8:55:ff:76:e8:59:
79:a6:3b:5e:a7:96:75:d1:15:e2:2c:ef:61:79:d1:
63:cd:5d:32:4a:a8:04:e7:8c:2a:af:3d:19:c6:88:
f6:1b:8f:a8:4e:aa:da:56:b4:45:fd:a5:5c:15:f5:
77:c7:e9:1d:b4:b5:7b:e1:ef:61:11:82:19:90:34:
92:6d:f9:8f:52:6e:16:18:1b:f6:bb:f2:1e:a9:76:
cd:13:85:c1:5f:e7:23:04:b7:76:81:0f:86:63:30:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:10:F1:88:9C:C2:15:42:3C:EF:54:C3:F9:71:1E:7C:BB:61:D2:74
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:eb:13:8a:45:ce:64:58:19:da:b8:de:bb:71:bc:0d:9d:de:
e4:6b:66:4e:76:27:1b:f5:87:b8:5d:d7:6a:b4:4c:7c:46:09:
5a:2b:26:00:44:fa:8d:5f:f0:bf:34:8c:90:0c:17:28:de:ee:
9a:c7:af:74:bd:6f:d7:e8:21:de:80:36:a3:72:5c:22:8a:c6:
d2:bb:e8:71:11:b0:a8:d5:75:b2:f1:e3:54:05:9f:dd:d4:a9:
cf:1b:5c:bc:66:d4:17:c4:7e:6b:5a:71:4b:87:60:38:0c:64:
5d:38:4d:26:e8:b1:53:db:f1:a1:83:96:2d:c8:ac:6e:9e:45:
1e:73:82:5c:9b:e3:ff:28:0f:8e:53:53:45:d8:23:25:c1:09:
b7:7e:f0:b6:18:be:55:8a:bf:25:6e:c0:89:c1:5a:2f:ee:31:
66:26:91:d3:a2:2b:2d:77:65:79:ee:a2:a9:31:01:bc:ed:94:
db:e8:de:69:db:9f:73:68:a7:a3:c2:2d:72:55:35:a4:39:7d:
72:29:b9:d5:3d:73:3c:97:2d:2a:72:b3:85:8c:1a:8c:16:40:
52:f9:3b:a0:96:e9:19:db:dd:dc:ce:89:a2:fb:8e:e3:f3:6d:
ea:20:91:fb:72:31:ec:6f:22:fd:6b:0b:37:9e:e5:53:bb:cb:
73:5c:76:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbeHgH+kHmBE2Kg1LEtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMWYyODlhMDBhMWIxMTViN2YzYTRkMWI4MDExYmY5MGQx
YTJmNzIwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
Eyg1ZDEwZjE4ODljYzIxNTQyM2NlZjU0YzNmOTcxMWU3Y2JiNjFkMjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwNYuoTK2NdhQgYhTXXlEDj41mXu
EkaGpeeK0sUD75c/of3NPzeBCBw6/XxnO9+nWF56sB2HT8oBpkTSViRQmxPZPQra
51Q1ySAF6pWhTWHPZiKcK9hqVCf01kc+EDShZE/zPmEQ5+BFoEPnGuMFP1rqxUBW
mEbRtUhXLnQhv8Om0aFElMoLXmspClxPVS8lHTZ8d/1Ubeat/zqOMdD4Vf926Fl5
pjtep5Z10RXiLO9hedFjzV0ySqgE54wqrz0Zxoj2G4+oTqraVrRF/aVcFfV3x+kd
tLV74e9hEYIZkDSSbfmPUm4WGBv2u/IeqXbNE4XBX+cjBLd2gQ+GYzBJowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0Q8YicwhVCPO9Uw/lxHny7YdJ0MB8GA1UdIwQY
MBaAFPEfKJoAobEVt/Ok0bgBG/kNGi9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjct
NzRlODQ5NjcxNjhiLzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81MTUxZTEtMzZiNy00MjA1LTlhZjctNzRlODQ5NjcxNjhi
LzEvOFI4b21nQ2hzUlczODZUUnVBRWItUTBhTDNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiesTikXO
ZFgZ2rjeu3G8DZ3e5GtmTnYnG/WHuF3XarRMfEYJWismAET6jV/wvzSMkAwXKN7u
msevdL1v1+gh3oA2o3JcIorG0rvocRGwqNV1svHjVAWf3dSpzxtcvGbUF8R+a1px
S4dgOAxkXThNJuixU9vxoYOWLcisbp5FHnOCXJvj/ygPjlNTRdgjJcEJt37wthi+
VYq/JW7AicFaL+4xZiaR06IrLXdlee6iqTEBvO2U2+jeadufc2ino8ItclU1pDl9
cim51T1zPJctKnKzhYwajBZAUvk7oJbpGdvd3M6JovuO4/Nt6iCR+3Ix7G8i/WsL
N57lU7vLc1x2pg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:50 2025 by rpki-client